Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B0ILndEI9bHwwt4xud9HETgaRow.roa
File: B0ILndEI9bHwwt4xud9HETgaRow.roa (raw, json)
Hash identifier: CbaOZaipYzG6Ujozh89AHznsVIxvHi4kaQ89d3K0RX8=
Subject key identifier: 07:42:0B:9D:D1:08:F5:B1:F0:C2:DE:31:B9:DF:47:11:38:1A:46:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181ED638066EFE8A4BC11491BDA20678242
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B0ILndEI9bHwwt4xud9HETgaRow.roa
Signing time: Mon 11 Jul 2022 13:12:09 +0000
ROA not before: Mon 11 Jul 2022 13:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:63:80:66:ef:e8:a4:bc:11:49:1b:da:20:67:82:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 13:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07420b9dd108f5b1f0c2de31b9df4711381a468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:4d:39:3d:d4:80:08:56:87:1e:c4:78:6d:
d3:7e:04:44:ab:f6:30:8d:ce:f3:1a:3d:e7:a7:2f:
3d:1a:18:7a:3d:48:e3:e7:3f:70:f5:29:85:06:59:
59:fb:5b:13:54:52:ea:52:84:35:c5:eb:fb:44:92:
6e:20:a9:71:b5:fb:44:31:1a:1a:35:d3:91:43:2a:
59:a4:1a:ea:49:0b:6b:b8:d8:11:3b:21:4d:61:a1:
a1:98:f0:b9:2a:56:3d:51:d0:73:05:68:13:88:a4:
05:fa:f2:85:62:9f:97:b3:ce:e7:85:d3:7d:71:fd:
95:8d:aa:6a:98:69:d9:d4:17:5c:2e:c7:11:4b:2a:
ea:7d:51:5d:35:1f:82:f0:fa:92:ea:d2:0a:da:c2:
ab:c3:4c:5a:47:18:06:80:c4:c5:82:a7:6a:26:cd:
75:8c:c8:05:01:3c:81:ce:bb:7e:5d:58:c6:3a:17:
22:b6:29:25:c7:af:da:91:e6:eb:80:49:05:23:3d:
6b:5c:7d:ed:9e:df:80:18:5c:e9:18:28:c8:ee:43:
c1:14:41:e0:2c:47:78:79:57:95:a4:8c:67:dd:01:
10:bd:55:8d:67:ab:83:6e:2a:dc:72:cd:1c:d1:87:
96:f2:13:78:7c:ed:2f:ef:3c:c4:30:22:0f:3b:b6:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:0B:9D:D1:08:F5:B1:F0:C2:DE:31:B9:DF:47:11:38:1A:46:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B0ILndEI9bHwwt4xud9HETgaRow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:8c:7a:74:d4:c3:06:41:d1:4b:4b:35:07:01:f1:c1:79:52:
dd:d1:89:2c:47:71:64:d2:84:3e:e6:4c:de:7e:c5:10:b0:46:
53:ad:81:02:13:43:88:2b:f5:d6:db:49:ed:44:0f:31:78:7e:
7e:d2:f9:26:46:0a:c0:aa:d9:f1:e4:b9:99:46:38:ff:12:88:
b5:13:71:30:89:89:43:28:ce:2c:c3:1d:74:22:9a:f3:c6:b6:
e5:e1:63:cb:a9:6a:ea:f1:20:55:7e:13:ed:0f:c1:1c:f5:b5:
05:a4:50:d5:e3:1c:20:17:5c:92:c0:20:bf:5e:fd:0b:b8:83:
d3:3e:2c:73:63:fb:69:42:d8:6b:3c:2d:9d:0a:17:a8:54:66:
d4:43:f9:f6:67:a5:84:fc:4e:a1:79:2f:25:ee:f6:d9:1c:d0:
fc:dd:97:78:fc:f0:db:02:c2:6a:40:93:bf:f4:88:a9:11:ae:
58:7e:f3:c2:6f:95:da:d7:4b:7e:b3:02:60:64:70:ea:c9:bc:
b7:49:ab:62:b1:b0:12:ab:70:3f:47:de:9d:eb:dd:3f:2a:dc:
1d:1f:b9:4b:3f:d1:b3:e9:30:b1:3e:85:88:10:07:e1:39:e9:
86:fd:1f:82:0a:a8:43:45:98:e8:1e:92:aa:8b:3e:8b:1b:61:
a9:2b:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:50 2025 by rpki-client